rfc-6173

Definitions of Managed Objects for the Internet Fibre Channel Protocol (iFCP)

P. Venkatesen (Editor)
date2011-03 streamIETF areatsv wgstorm statusPROPOSED STANDARD pages31 canonicalhttps://www.rfc-editor.org/rfc/rfc6173 doi10.17487/RFC6173
This document defines Management Information Base (MIB) objects to monitor and control the Internet Fibre Channel Protocol (iFCP) gateway instances and their associated sessions, for use with network management protocols. This document obsoletes RFC 4369. [STANDARDS-TRACK]

obsoletes

Extracted elements (25)

design-rationale §5

Both Counter64-based (ifcpSessionStatsTable) and Counter32-based (ifcpSessionLcStatsTable) statistics are provided because at 1-Gbps rates a Counter32 can wrap as often as every 34 seconds, yet Counter32 objects are needed for backward compatibility with systems lacking Counter64 support or running SNMPv1.

snmp

design-rationale §4

The iFCP address translation mode is deprecated as of RFC 6172. This MIB revision obsoletes RFC 4369 specifically to reflect that deprecation, with the new compliance statement (ifcpGatewayComplianceNoTranslation) requiring only addressTransparent(1) mode.

snmp

design-rationale §5

The session table uses an opaque integer index (ifcpSessionIndex) rather than the local and remote N_Port identifiers, because using N_Port information would create a complex index that would be difficult to implement.

snmp

interoperability-note §5

Shortly after an iFCP session entry is created, it corresponds to an entry in the TCP-MIB tcpConnectionTable (RFC 4022), and optionally to RFC 2012's tcpConnTable for IPv4. The address type fields in both tables must match to simplify cross-table lookups.

snmp, tcp

interoperability-note §5

When a TCP connection for an iFCP session terminates, both the tcpConnectionTable entry and the ifcpSessionAttributesTable entry are deleted simultaneously. TCP port fields may temporarily hold value 0 during initial session setup before port numbers are known.

snmp, tcp

normative-requirement §5 REQUIRED

Both compliance statements restrict ifcpSessionLclPrtlAddrType and ifcpSessionRmtPrtlIfAddrType to global IPv4 and IPv6 address types only; other InetAddressType values need not be supported.

snmp

normative-requirement §6 RECOMMENDED

Deployment of SNMP versions prior to SNMPv3 is NOT RECOMMENDED. Implementers are RECOMMENDED to use SNMPv3 with full cryptographic mechanisms for authentication and privacy, and to restrict object access to principals with legitimate rights.

security, snmp

normative-requirement §5 RECOMMENDED

Implementers are RECOMMENDED to use the high-capacity Counter64 statistics in ifcpSessionStatsTable when possible, rather than the Counter32-based ifcpSessionLcStatsTable.

snmp

normative-requirement §5 REQUIRED

The ifcpGatewayComplianceNoTranslation compliance statement requires support only for addressTransparent(1) in ifcpLclGtwyInstAddrTransMode, reflecting the deprecation of address translation mode.

snmp

protocol-element §5

The IfcpAddressMode textual convention defines two address operating modes: addressTransparent(1) and addressTranslation(2). Address translation mode is deprecated per RFC 6172.

snmp

protocol-element §5

The IfcpIpTOVorZero textual convention represents the maximum IP propagation delay in seconds (range 0..3600). A value of 0 means Fibre Channel frame lifetime limits will not be enforced.

snmp

protocol-element §5

The ifcpLclGtwyInstTable contains an entry per managed local iFCP gateway instance, providing per-gateway parameters including default IP_TOV (default 6 seconds), default LTI (default 10 seconds), address translation mode, and FC broadcast support.

snmp

protocol-element §5

The IfcpLTIorZero textual convention represents the Liveness Test Interval (LTI) in seconds (range 0..65535). A value of 0 means no liveness testing will be performed.

snmp

protocol-element §5

The ifcpSessionAttributesTable provides session management information indexed by local gateway instance and session index, capturing local and remote portal IP addresses, TCP ports, N_Port WWNs, FC identifiers, IP_TOV, and LTI values per session.

snmp, tcp

protocol-element §5

The ifcpSessionBound object indicates whether a session is bound to specific local and remote N_Ports. Sessions are unbound by default and ready for future assignment.

snmp

protocol-element §5

The ifcpSessionDiscontinuityTime object records the sysUpTime value at the most recent counter discontinuity for the session stats table. It is zero if no discontinuities have occurred since last reinitialization.

snmp

protocol-element §5

The ifcpSessionLcStatsTable augments the session attributes table with low-capacity Counter32-based equivalents of the same statistics, provided for backward compatibility with systems that do not support Counter64 or need SNMPv1 support.

snmp

protocol-element §5

The ifcpSessionRmtNpFcidAlias object holds the Fibre Channel Identifier alias assigned by the local gateway for the remote N_Port, relevant only in address translation mode.

snmp

protocol-element §5

The IfcpSessionStates textual convention defines three session states: down(1), openPending(2), and open(3).

snmp

protocol-element §5

The ifcpSessionStatsTable augments the session attributes table with high-capacity Counter64-based statistics per session: TxOctets, RxOctets, TxFrames, RxFrames, StaleFrames, HeaderCRCErrors, FcPayloadCRCErrors, OtherErrors, and a discontinuity timestamp.

snmp

registry §7

This document registers the OBJECT IDENTIFIER value { transmission 230 } for the ifcpMgmtMIB module in the SMI Numbers registry.

registry, snmp

security-consideration §6

Five read-write MIB objects can disrupt storage traffic if modified without authorization: ifcpLclGtwyInstAddrTransMode, ifcpLclGtwyInstFcBrdcstSupport, ifcpLclGtwyInstDefaultIpTOV, ifcpLclGtwyInstDefaultLTInterval, and ifcpSessionIpTOV. SET operations in a non-secure environment without proper protection can have a negative effect on network operations.

security, snmp

security-consideration §6

SNMP versions prior to SNMPv3 lack adequate security. Even on a network secured by IPsec, earlier SNMP versions provide no access control over who on the secure network may GET or SET MIB objects.

security, snmp, ipsec

security-consideration §6

The ifcpLclGtwyInstTable and ifcpSessionAttributesTable expose sensitive information about storage session participants and traffic patterns; even GET and NOTIFY access to these objects should be controlled and values may need encryption in transit.

security, snmp, privacy

state-machine §5

An iFCP session transitions through states down(1), openPending(2), and open(3). The session duration counter resets to 0 when a session returns to the down state.

snmp